IHAC, where the Okta OpenID provider is configured and login works. However, when user logs in for the first time, instead his "preferred_username" the sub is set as user id in the OpenShift.
It causes that groups can't be synced.

We did investigation, and we see that the data in the Okta should be fine, the OpenID configuration is fine as well - just the OpenShift doesn't receive any information about the user. 

After increasing the logs of authentication to Debug, we see similar behavior in the logs (will be attached).

Is it possible that OpenShift ignores the configuration?
Is it possible that if Proxy in place would be able to strip certain data from the response body?

    

OpenShift 4.12 (but most likely affected in 4.15 as well)
    

n/a - customer can reproduce
    

    1.
    2.
    3.